2 * idata.h - Header file for ausearch-lookup.c
3 * Copyright (c) 2013 Red Hat Inc., Durham, North Carolina.
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
21 * Steve Grubb <sgrubb@redhat.com>
30 typedef struct _idata {
31 unsigned int machine; // The machine type for the event
32 int syscall; // The syscall for the event
33 unsigned long long a0; // arg 0 to the syscall
34 unsigned long long a1; // arg 1 to the syscall
35 const char *name; // name of field being interpretted
36 const char *val; // value of field being interpretted
39 int auparse_interp_adjust_type(int rtype, const char *name, const char *val);
40 const char *auparse_do_interpretation(int type, const idata *id);
42 hidden_proto(auparse_interp_adjust_type)
43 hidden_proto(auparse_do_interpretation)